The problem is that your definition of easy and mine probably differ. Me, I'd use iNav and look for the "restrict rename and unlink". You, might do a WRKLNK '/tmp', take option 8 to display attributes and look for "Restricted rename and unlink".
Remember, that early on in the life of V5R3 IBM had some silly autostart job or something that would change it back to "restrict rename and unlink" upon each IPL. I had them create a ptf that changed that so that it only changed the properties upon the initial install of V5R3 and would leave it changed back, if you changed it back.